On or before May 15, 2015, and each year thereafter, the state board shall submit to the governor and the legislature a written report. The report shall include, but not be limited to, the following information:
(a) Any categories of student data collected for the statewide longitudinal student data system that are not otherwise described as student data under K.S.A. 72-6313 , and amendments thereto;
(b) any changes to existing data collections, which includes changes to federal reporting requirements by the secretary of the United States department of education;
(c) an explanation of any exceptions provided by the state board in the preceding calendar year regarding the release or transfer of student data; and
(d) the scope and nature of any privacy or security audits completed in the preceding calendar year.